HackerOne / Jwt-Simple Node Module

1 CVE

CVE ID	Description	Severity	CVSS	Published
CVE-2016-10555	Since "algorithm" isn't enforced in jwt.decode()in jwt-simple 0.3.0 and earlier, a malicious user could choose what algorithm is sent sent to the server. If th…	MEDIUM	6.5	May 31, 2018

Rows per page

Showing 1 to 1 of 1 CVEs